Forums
GitHub - Enterprise-grade CI DAST for your APIs. Free. Open source.
ZeroDAST wraps OWASP ZAP inside a security-hardened CI pipeline with automated authentication, delta-scoped PR scanning, and intelligent reporting.
š 4 auth adapters ā handles custom headers, nested tokens, admin separation. Zero scripting. ā” ~3 min PR scans, ~5 min nightly scans š”ļø Privilege-isolated CI architecture ā PR code can't touch the scanner š 52% more findings than vanilla ZAP on 4 real-world targets (170k+ combined ā) š° $0 cost vs $180k+/year for enterprise DAST
